75 matches found
Memory corruption
Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote attackers to cause a denial of service crash and execute arbitrary code via vectors related to a document object "appended in a specific order" with "particular functions...
CVE-2008-2257
CVE-2008-2257 concerns memory corruption in Microsoft Internet Explorer 5.01/6/7 when handling a document object appended in a specific order, allowing remote code execution and DoS under memory corruption scenarios. Connected sources also reference CVE-2008-2258, described as a related memory-co...
ZDI-08-050: Microsoft Internet Explorer XHTML Rendering Memory Corruption Vulnerability
ZDI-08-050: Microsoft Internet Explorer XHTML Rendering Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-050 August 12, 2008 -- CVE ID: CVE-2008-2257 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 ...
MS08-045: Cumulative Security Update for Internet Explorer (953838)
The remote host is missing the IE cumulative security update 953838. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33874;...
SuSE 10 Security Update : OpenSSH (ZYPP Patch Number 2257)
The OpenSSH release 4.5 contains a security fix which has been backported to the openssh versions in our old products. - Incorrect return argument checking in the privilege separation monitor was fixed. In case of an exploitable unprivileged helper this could have been used to elevate privileges...
CVE-2002-2257
CVE-2002-2257 affects LIBCGI 1.0.2 and 1.0.3. A stack-based overflow in the parse_field function (cgi_lib.c) allows remote attackers to execute arbitrary code by sending a long argument. Documented impact is remote code execution with a CVSSv2 base score of 10.0 (HIGH). No remediation or patch de...
CVE-2007-2257
PHP remote file inclusion vulnerability in subscp.php in Fully Modded phpBB2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-2257
PHP remote file inclusion vulnerability in subscp.php in Fully Modded phpBB2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-2257
The CVE-2007-2257 entry concerns a PHP remote file inclusion in subscp.php of Fully Modded phpBB2, where an attacker can supply a URL via the phpbb_root_path parameter to execute arbitrary PHP code. The vulnerability enables remote code execution with network access and low complexity, listed for...
CVE-2006-2257
CVE-2006-2257 is an XSS vulnerability affecting easyEvent 1.2, disclosed for index.php via the curr_year parameter. The underlying issue is improper handling of user-supplied input leading to script/HTML injection. Affected component: index.php in easyEvent 1.2. Impact per sources is partial conf...
CVE-2004-2257
phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request...
CVE-2004-2257
CVE-2004-2257 affects phpMyFAQ 1.4.0, where remote attackers can access the Image Manager and upload or delete images without authorization via a direct request. The connected sources corroborate an authentication bypass exposing image management functionality, with practical impact described as ...
CVE-2005-2257
PhpSlash 0.8.0 is affected by a vulnerability in the saveProfile function that allows remote attackers to modify arbitrary profiles and gain privileges by changing the author_id parameter. The available sources (CVE/NVD) describe the flaw and its impact as complete confidentiality, integrity, and...
phpMyFAQ Image Upload Authentication Bypass
The version of phpMyFAQ on the remote host contains a flaw that could allow an attacker without authorization to upload and delete arbitrary images on the remote host. An attacker may exploit this problem to deface the remote website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...